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(54) Secret Drnfooroatioin) Jrodetniof icataon system 

(57) In a secret information identification system, an 
input password (PW IN ) is compared with a registered 
password (PW REQ ) every time a permission signal (St) 
is generated. Lock release permission is given when a 
comparison result (Scomp) indicates coincidence. Alter- 
natively, an input password is compared with a regis- 
tered password and lock release permission is given 
every time a permission signal is generated when the 



comparison indicates coincidence The cycle of genera- 
tion of the permission signal is elongated as the number 
of events of non-coincidence in comparison results 
increases. As a result, the password is not easily bro- 
ken, and further the password input function is not 
locked even after input of a wrong password. 
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Description events of non-coincidence in comparison results. 

According to another aspect of the invention, the 

The present invention relates to personal informa- input information is compared with the predetermined 

tion identification systems and, more specifically, to an information, and the authorization is given in response 

identification system which verifies input secret informa- s to generation of the permission signal when a compari- 

tion. son result indicates coincidence. The interval or cycle of 

In automatic teller machines and the like installed in generation of the permission signal is varied according 

banking organs, a user is authenticated by his inputting to the number of events of non-coincidence in compari- 

secret data such as a password, whereby use of his son results. 

account, for instance, by other persons is prohibited. 10 Therefore, even if all possible secret information are 

That is, in this type of system, an input password is com- input, coincidence does not occur. This provides an 

pared with a preset password and a machine is allowed advantage that the secret information is not easily bro- 

to start operating when the two passwords coincide with ken even with the use of a computer or the like. Further, 

each other. In such a system, a preset password is gen- according to the invention, the secret information input 

erally a fixed one. There are known several types of the 15 function is not locked. This provides another advantage 

system including a first type system which allows a user that even after input of incorrect information, the lock of 

to input passwords a limitless number of times and a system can still be released by inputting the predeter- 

another type system in which a password input function mined information. 

is locked, i.e., disabled if passwords are input more than The above and other objects and advantages will 

a given number of times (refer to Japanese Unexamined 20 become apparent from the following detailed descrip- 

Patent Publication No. 62-219048). tion when read in conjunction with the accompanying 

The above-described conventional systems have drawings wherein: 
the following disadvantages. In the first type system 

which allows a user to input passwords a limitless FIG. 1 is a block diagram showing the configuration 

number of times, a password is likely broken by using a 25 of a password identification system according to an 

computer, for instance. In the other type system in embodiment of the present invention; 

which a password input function is locked to disable FIG. 2 is a flowchart showing an operation of the 

subsequent password inputs if passwords are input password identification system of FIG. 1 ; 

more than a given number of times, the password input FIG. 3 is a time chart showing an example of the 

function is locked when wrong passwords are input 30 operation of the password identification system of 

inadvertently, in which case even the true user is prohib- FIG. 1 ; 

ited from using the machine. FIG. 4 is a time chart showing another example of 

The present invention has been made to solve the the operation of the password information identif i- 

above problems in the art, and therefore an object of the cation system of FIG. 1 ; 

present invention is to provide a system where a secret 35 FIG. 5 is a block diagram showing the configuration 

information is hard to break and an information input of a password identification system according to 

function is not locked. another embodiment of the invention ; 

According to the present invention, a system for FIG. 6 is a flowchart showing an operation of the 

providing authorization by checking whether input infor- password information identification system of FIG. 

mation is coincident with predetermined information, 40 5; 

includes a first controller which varies permission timing FIG. 7 is a time chart showing an example of the 

based on a check result of the input information and a operation of the password information identification 

second controller which provides the authorization system of FIG. 5; 

when the check result indicates coincidence at the per- FIG. 8 is a time chart showing another example of 

mission timing. The first controller may elongate an 45 the operation of the password information identify 

interval of the permission timing based on the check cation system of FIG. 5; 

result of the input information. Preferably, the first con- FIG. 9 is a detailed block diagram showing a first 

trailer may elongate the interval of the permission timing example of a permission signal generator of FIG. 1 

as the number of check results indicating non-coinci- or FIG. 5; 

dence increases. Further, the first controller may ran- so FIG. 10 is time a chart showing an operation of the 
domly vary an interval of the permission timing based permission signal generator of FIG. 9; and 
on the check result of the input information. FIG. 1 1 is a detailed block diagram showing a sec- 
According to an aspect of the present invention, the ond example of the permission signal generator of 
input information is compared with the predetermined FIG. 1 or FIG. 5;. 
information every time the permission signal is gener- 55 

ated and, when a comparison result indicates coinci- Referring to FIG. 1, a password identification sys- 

dence, the authorization such as lock release is tern according to an embodiment of the present inven- 

provided. The cycle or interval of generation of the per- tion has the following configuration. An input device 101 

mission signal is varied according to the number of such as a keypad allows a user to input a password 
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PW| N and other necessary information. A check permit- 
ting section 102 transfers the input password PW| N to a 
checking section 103 in response to a permission signal 
S T . In other words, the check permitting section 102 has 
a function of permitting a checking operation in 5 
response to the permission signal S T . The checking 
section 103 checks the input password PW, N by com- 
paring it with a registered password PW REG previously 
stored in a memory 104. When the comparison result is 
"coincidence," a lock controller 1 05 releases the lock of w 
a system 106. A permission signal generator 107 
receives the comparison result from the checking sec- 
tion 103 and generates the permission signal Sj with 
varying the cycle of generation of the permission signal 
S T based on the comparison result. 15 

The permission signal generator 107 includes a 
consecutive-error counter 108 which counts the number 
of consecutive comparison results of "non-coincidence" 
received from the checking section 103. A generation 
interval controller 109 controls the generation interval 20 
(or cycle) of the permission signal Sp in accordance 
with the count of the counter 108 as will be described 
later. A signal generator 1 10 generates the permission 
signal S T under the control of the controller 109 and 
supplies it to the check permitting section 1 02. 25 

Referring to FIG. 2, the permission signal generator 
107 generates permission signals S T as trigger signals 
for permitting the checking operation. Normally, the per- 
mission signal generator 107 generates permission sig- 
nals Sj at minimum intervals. When a password PW| N is 30 
input through the input device 101 (step S201), the 
check permitting section 102 waits for generation of a 
permission signal S T by the permission signal generator 
107 (step S202). When a permission signal S T is 
detected (YES at step S202). the checking section 103 35 
compares the input password PW| N with the registered 
password PW REQ stored in advance in the memory 104 
(step S203). If the comparison result is "coincidence," 
the generation interval of the permission signals S T is 
minimized (step S204) and then the lock controller 105 40 
operates to release the lock of the system 106 (step 
$205), thereby allowing it to operate (step S206). 

On the other hand, if the input password PW| N is 
different from the registered password PW REG , the 
checking section 103 detects non-coincidence (step 45 
S203). The consecutive-error counter 108 of the per- 
mission signal generator 107 counts consecutive errors 
in input passwords, and the generation interval control- 
ler 109 sets a permission signal generation interval in 
accordance with the count of the counter 108 (step so 
S207). In this embodiment, the permission signal gen- 
eration interval (cycle) is elongated as the count 
increases. The signal generator 1 10 generates permis- 
sion signals S T at the thus-set cycle or interval. 

In this state where the permission signal generation 55 
interval (cycle) ha been elongated, even if a password 
PW| N2 is again input after a lapse of a short time, the 
check permitting section 102 does not permit the check- 
ing operation of the checking section 103 because no 



permission signal is generated due to the elongated 
permission signal generation interval. A user is not 
given any permission signal generation information. 
When he further inputs a password PW| N3 and a per- 
mission signal Sr is then generated after a lapse of the 
permission signal generation interval, the check permit- 
ting section 102 permits the checking operation in the 
checking section 103 (YES at step S202). In response, 
the checking section 103 compares the inpirtpassword 
PW1N3 with the registered password PW REQ (step 

5203) . The fact that the input password PW| N2 is not 
subjected to checking is the important feature of this 
system. That is, even if the input password PW| N2 is a 
registered one, the system 106 is not allowed to oper- 
ate. 

If non-coincidence is again detected with an input 
password PW| N3l the count of consecutive errors is 
incremented by one. As a result, the generation interval 
controller 109 further elongates the permission signal 
generation interval (step S207), which means that the 
non-operational time of the checking section 103 is 
elongated accordingly. If coincidence is detected with 
the input password PW IN3 , the permission signal gener- 
ation interval is set at the minimum value (step S204). 
the lock is released (step S205), and the system 106 is 
allowed to operate (step S206). 

A consideration will be given to a case where a reg- 
istered password is input once after N times of input of 
wrong passwords. In this case, permission signals Sr 
are generated at permission signal generation intervals 
corresponding to the number N of consecutive errors. 
When a registered password PW REQ is input and the 
check permitting section 102 receives a permission sig- 
nal S T that is generated after a lapse of the permission 
signal generation interval that corresponds to the 
number N of consecutive errors, the check permitting 
section 102 outputs the input password PWj N to the 
checking section 103 to permit the checking operation. 
When the checking section 103 compares the input 
password PW| N with the registered password PW REQ 
and detects coincidence, the permission signal genera- 
tion interval is returned to the minimum value (step 

5204) , the lock is released (step S205), and the system 
106 is allowed to operate (step S206). 

Next, the permission signal generation interval will 
be described with reference to time charts of FIGS. 3 
and 4. Each of FIGS. 3 and 4 shows input passwords 
PW lN , permission signal S T , comparison outputs indi- 
cating a comparison result (coincidence or non-coinci- 
dence) of the checking section 103, and lock releasing 
signal S RU which is output from the lock controller 105. 
In each of FIGS. 3 and 4, the horizontal axis represents 
time while solid segments of the comparison outputs 
and the lock releasing signals S RL represent active 
states and the remaining portions represent inactive 
states. 

In the permission signals Sr of FIG. 3(b), permis- 
sion is indicated by a high level. The permission signals 
St of FIG. 4(b) are used as triggers and operations are 
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effected at the rising edges of the triggers. While no 
password is input, the checking operation is not per- 
formed even if a permission signal S T is generated. In 
this example, to simplify the description, it is assumed 
that the registered password PW REG is "6" and input of 
only passwords PW, N ranging from "0" to "9" is 
accepted. 

Referring to FIG. 3, in the normal state in which the 
permission signal generation interval is set to a mini- 
mum value ("0" in this example), the lock is released 
and the system 106 is allowed to operate as soon as the 
registered password PW REG of "6" is input. 

A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to "9" on a try-everything basis. When a first pass- 
word PW lN1 of "0" is input, the checking section 103 
detects non-coincidence and the number of consecutive 
errors becomes 1. As a result, the permission signal 
generation interval, which was "0" in the initial state, 
becomes "1." When a next password PW| N2 of "1" is 
input, the checking operation is not performed because 
no permission signal Sj is generated. Since the user is 
not given the permission signal generation information, 
he inputs a next password PWhm 3 of "2." Since a permis- 
sion signal St is generated thereafter, the input pass- 
word is compared with the registered password PW REG . 
As a result non-coincidence is again detected, whereby 
the number of consecutive errors becomes 2 and the 
permission signal generation interval also becomes "2." 

When next passwords PW|m 4 and PW| N5 (i.e., "3" 
and "4") are sequentially input, the checking operation 
is hot performed because no permission signals are 
generated. When a further next password PW IN6 of "5" 
is input, a permission signal S T is generated thereafter 
and hence the input password PW| N6 is subjected to the 
checking operation. Since non-coincidence is detected, 
the number of consecutive errors becomes 3 and the 
permission signal generation interval becomes "3." 

Although a registered password PW IN7 of "6" is 
input next, the checking section 103 does not performs 
its checking operation because no permission signal St 
is generated. Subsequently, passwords PW| N8 to 
PWin-io o f " 7 " to w 9" are sequentially input Since a per- 
mission signal St is generated after the input of the 
password PWj N10 of "9," only that password is sub- 
jected to the checking operation. Since non-coincidence 
is again detected, the number of consecutive errors 
becomes 4 and the permission signal generation inter- 
val becomes "4." Thereafter, the checking section 103 
does not operate while no password input is made. 
Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval 
is kept at "4." 

Even when a registered password PW| N1 1 of "6" is 
thereafter input, the checking operation is not per- 
formed until generation of a permission signal St The 
checking section 103 performs its checking operation 
when a permission signal St is generated at time T1 
after a lapse of a permission signal generation interval 
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"4." Since password coincidence is detected at that 
time, the bck is released and the system 106 is allowed 
to operate. 

Referring to FIG. 4, as in the case of the example of 

5 FIG. 3, in the normal state, the permission signal gener- 
ation interval is set to the minimum value. In this exam- 
ple, the permission signal S T is generated as a trigger 
signal with rising consecutively. If a registered password 
PW REQ of "6" is input in this state, the lock is released 

10 immediately and the system 1 06 is allowed to operate. 
In the case where a user who intends to break the 
password inputs all passwords "0" to "9" on a try-every- 
thing basis, as in the case of the example of FIG. 3, the 
permission signal generation interval is elongated as 

15 the number of consecutive events of non-coincidence in 
comparison results increases. After the number of con- 
secutive errors becomes 4 and the permission signal 
generation interval becomes "4", the checking section 
103 does not operate while no password input is made. 

20 Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval 
is kept at "4." 

Even when a registered password PW, N11 of "6" is 
thereafter input, the checking operation is not per- 

25 formed until generation of a permission signal Sj. The 
checking section 103 performs its checking operation 
when a permission signal St is generated at time T1 
after a lapse of a permission signal generation interval 
"4." Since password coincidence is detected at that 

30 time, the lock is released and the system 1 06 is allowed 
to operate. 

Referring to FIG. 5, a password identification sys- 
tem according to another embodiment of the invention 
has the following configuration. An input device 301 

35 such as a keypad allows a user to input a password 
PW| N and other necessary information. The password 
PW (N is output to a checking section 302 which checks 
the input password PW iN by comparing it with a regis- 
tered password PW REG previously stored in a memory 

40 303. The comparison result of the checking section 302 
is output to a lock release permitting section 304 and a 
permission signal generator 307. The lock release per- 
mitting section 304 outputs a lock release permission 
signal to a lock controller 305 in response to the com- 

45 parison result of "coincidence" and a permission signal 
St. In other words, the lock release permitting section 
304 has a function of permitting lock release in 
response to the comparison result and the permission 
signal S T . when receiving the lock release permission 

so signal from the lock release permitting section 304, the 
lock controller 305 releases the lock of a system 306. 
The permission signal generator 307 receives the com- 
parison result from the checking section 302 and gener- 
ates the permission signal St with varying the cycle of 

55 generation of the permission signal St based on the 
comparison result 

The permission signal generator 307 includes a 
consecutive-error counter 308 which counts the number 
of consecutive comparison results of "non-coincidence" 
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received from the checking section 302. A generation 
interval controller 309 controls the generation interval 
(or cycle) of the permission signal Sj in accordance 
with the count of the counter 308 as will be described 
later A signal generator 310 generates the permission 
signal St under the control of the controller 309 and 
supplies it to the lock release permitting section 304. 

Referring to FIG. 6, the permission signal generator 
307 generates permission signals S T as trigger signals 
for permitting the lock release operation. Normally, the 
permission signal generator 307 generates permission 
signals S T at minimum intervals. When a password 
PW| N is input through the input device 301 (step S401), 
the checking section 302 compares the input password 
PW lN with a registered password PW RB3 stored in 
advance in the memory 303 (step S402). If the compar- 
ison result is "coincidence," the lock release permitting 
section 304 waits for generation of a permission signal 
St by the permission signal generator 307 (step S403). 
When a permission signal St is received (YES at step 
S403), after the permission signal generation interval is 
reset to the minimum value (step S404), the lock 
release permitting section 304 outputs the lock release 
permission signal to the lock controller 305. The lock 
controller 305, in response to the lock release permis- 
sion signal, operates to release the lock of the system 
306 (step S405), thereby allowing it to operate (step 

5406) . 

On the other hand, if the input password PW !N is 
different from the registered password PW RE q, the 
checking section 302 detects non-coincidence (step 
S402). The consecutive-error counter 308 of the per- 
mission signal generator 307 counts errors in input 
passwords, and the generation interval controller 309 
sets a permission signal generation interval in accord- 
ance with the count of the counter 308. The signal gen- 
erator 310 generates the permission signal St whose 
generation interval (cycle) is elongated in accordance 
with the set permission signal generation interval (step 

5407) . 

If a password PW )N2 is input in this state and non- 
coincidence is detected, the error count is incremented 
by one and hence the permission signal generation 
interval is further elongated. On the other hand, even if 
coincidence is detected in this state, the lock release 
permitting section 304 does not immediately permit lock 
release because no permission signal is generated due 
to the elongated permission signal generation interval 

A user is not given any permission signal genera- 
tion information. When he further inputs a password 
PW, N3> the checking operation is performed, and a per- 
mission signal St is then generated after a lapse of the 
permission signal generation interval. If a comparison 
result of the password PW| N3 is "non-coincidence", con- 
trol returns to the password input waiting state (step 
S401). If the comparison result is "coincidence," the 
permission signal generation interval is made the mini- 
mum value (step S404), the lock is released (step 
S405), and the system 306 is allowed to operate. The 



fact that as described above the lock is not released 
even if the input password PW|N2 * s a registered one 
and the comparison result is "coincidence" is the impor- 
tant feature of this system. If non-coincidence is again 

5 detected with an input password PW iN3 , the error count 
is incremented by one. As a result, the permission sig- 
nal generation interval is further elongated, which 
means that the lock release prohibition time is elon- 
gated accordingly. 

10 A consideration will be given to a case where a reg- 
istered password is input once after N times of input of 
wrong passwords. In this case, permission signals St 
are generated at permission signal generation intervals 
corresponding to the number N of errors. When a regis- 

75 tered password PW REQ is input, the checking section 
302 detects coincidence and the lock release permitting 
section 304 detects a permission signal S T that is gen- 
erated after a lapse of the permission signal generation 
interval that corresponds to the number N of errors and 

20 permits the lock release operation. Then, the permis- 
sion signal generation interval is returned to the mini- 
mum value (step S404), the lock is released (step 

5405) , and the system 306 is allowed to operate (step 

5406) . 

25 Next, the permission signal generation interval will 
be described with reference to time charts of FIGS. 7 
and 8. Each of FIGS. 7 and 8 show input passwords 
PW| N , permission signals S T , comparison outputs indi- 
cating comparison results of the checking section~302, 

30 and lock release signals S RL which are output from the 
lock controller 305. In each of FIGS. 7 and 8, the hori- 
zontal axis represents time while solid segments of the 
comparison outputs and the lock release signals Srl 
represent active states and broken lines represent inac- 

35 tive states. 

In the permission signals S T of FIG. 7(b), permis- 
sion is indicated by a high level. The permission signals 
S T of FIG. 8(b) are used as triggers and operations are 
effected at the rising edges of the triggers. While no 

40 password is input, the checking operation is not per- 
formed. In this example, to simplify the description, it is 
assumed that the registered password PW REQ is "6" 
and input of only passwords PW| N of "0" to . "9" is 
accepted. 

45 Referring to FIG. 7, in the normal state in which the 
permission signal generation interval is set to a mini- 
mum value ("0" in this example), the lock is released 
and the system 306 is allowed to operate as soon as the 
registered password PW REQ of "6" is input. 

so A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to "9". on a try-everything basis. When a first pass- 
word PW| N of "0" is input, the checking section 302 
detects non-coincidence and the number of errors 

55 becomes 1. As a result, the permission signal genera- 
tion interval, which was "0" in the initial state, becomes 
"1." When a next password PW, N of "1" is input, the 
checking section 302 detects non-coincidence and 
hence the number of errors becomes 2 and the permis- 
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sion signal generation interval becomes "2." Then, 
passwords PW IN of "3" to "5" are sequentially input, so 
that the number of errors becomes 6 and the permis- 
sion signal generation interval becomes "6." 

When a registered password PW !N of "6" is input 5 
subsequently, the checking section 302 detects coinci- 
dence. However, since no permission signal St is gen- 
erated, the lock release permitting section 304 does not 
permit lock release. Subsequently, passwords PW iN of 
"7" to "9" are sequentially input, so that the number of 10 
errors becomes 9 and the permission signal generation 
interval becomes w 9." Thereafter, the checking section 
302 does not operate while no password input is made. 
Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval is 
is kept at "9." 

When a registered password PW JN of "6" is thereaf- 
ter input, coincidence is detected but the lock is not 
released until generation of a permission signal S T . 
When a permission signal Sj is generated at time T2 so 
after a lapse of a permission signal generation interval 
"9," the permission signal generation interval is made 
the minimum value, the lock is released, and the system 
306 is allowed to operate. 

Referring to FIG. 8. as in the case of the example of 25 
FIG. 7, in the normal state the permission signal gener- 
ation interval is minimum and permission signals S T rise 
consecutively at minimum intervals. If a registered pass- 
word PW REG of "6" is input in this state, the lock is 
released immediately and the system 306 is allowed to 30 
operate. 

A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to N 9 n on a try-everything basis. In this case, as in the 
case of the example of FIG. 7, the permission signal 35 
generation interval is elongated as the number of events 
of non-coincidence in comparison results increases. 
After the number of errors becomes 9 and the permis- 
sion signal generation interval becomes "9", the check- 
ing section 302 does not operate while no password 40 
input is made. Since neither coincidence nor non-coin- 
cidence is detected, the permission signal generation 
interval is kept at "9." 

When a registered password PW REG of "6" is there- 
after input coincidence is detected but the lock is not 45 
released while no permission signal St is generated. 
When a permission signal St is generated at time T2 
after a lapse of a permission signal generation interval 
"9", the permission signal generation interval is made 
the minimum value, the lock is released, and the system so 
306 is allowed to operate. 

Referring to FIG. 9, the permission signal generator 
107 or 307 may be constituted of the following compo- 
nents, for example. A reference oscillator 501 outputs a 
reference clock signal CLK to a counter 502. The coun- ss 
ter 502 performs a counting operation in response to 
clock pulses of the reference clock signal CLK. A logic 
circuit 503 receives the outputs of the counter 502 and 
generates clock signals Sro to St2 of different cycles 



based on the count outputs of the counter 502. A coun- 
ter 505 receives the non-coincidence signal from the 
checking section 103 or 302 and outputs the number N E 
of errors by counting the number of non-coincidence 
events. Further, the counter 505 receives the lock 
release signal S RL as a count reset signal from the lock 
controller 105 or 305. Alternatively, the lock release per- 
mission signal may be received from the lock release 
permitting section 304 in the embodiment as shown in 
FIG. 5. A selector 504 selects one of the clock signals 
S T o to Sj2 in accordance with the number N E of errors 
and outputs the selected one as a permission signal St 
to the check permitting section 102 or the lock release 
permitting section 304. 

The logic circuit 503 consists of a NAND gate 
NAND1 having inverted outputs "56" and "5T" of the 
counter 502 as inputs and another NAND gate NAND2 
having inverted outputs <3T" and "52" of the counter 
502 as inputs. The NAND gates NAND1 and NAND2 
output the clock signals &n and S T2 t0 the selector 504. 
An inverted output "56" of the counter 502 is also sup- 
plied to the selector 504 as the clock signal S T o. 

The counter 502 and the logic circuit 503 generate 
a plurality of clock signals S T o to St2 having different 
periods from the reference clock CLK. The selector 504 
selects one of the clock signals Sro to S^ according to 
the number NE of errors which is counted by the coun- 
ter 505. The non-coincidence signal, which is one of two 
comparison results of the checking section 1t)3 or302, 
is supplied to the counter 505 as a clock signal. A signal 
for setting the permission signal generation interval at 
the minimum value, such as a lock releasing signal S RL , 
is also supplied to the counter 505 as a reset signal, in 
this manner, the function of setting the permission sig- 
nal generation interval at the minimum value when the 
comparison result is "coincidence" (step S204 in FIG. 2 
or step S404 in FIG. 6) is realized. 

As shown in FIG. 10. in this example, the selector 
504 receives three kinds of waveforms Sro to St2- 
When the number N E of errors is 0 (normal state), a tim- 
ing clock signal Sro having a given cycle is selected as 
the permission signal S^ When the number N E of errors 
is 1, a frequency-halved timing clock signal S T i is 
selected as the permission signal $j. When the number 
N E of errors is 2, a frequency-quartered timing signal 
St2 is selected as the permission signal St In short, the 
frequency or cycle of the permission signal St is con- 
trolled in accordance with the number of events of non- 
coincidence in comparison results. 

In this example, the maximum countable number of 
errors is 3 because the counter 505 is a 2-bit counter. 
The countable number of errors can be increased by 
increasing the number of bits of the counter 505 and the 
kinds of signals generated by the counter 502 and the 
logic circuit 503. i.e.. the kinds of different frequencies. 
In general, N (N is an integer) frequency dividers having 
different divisors may be used to produce N clock sig- 
nals Sto-Stn having different frequencies. And a selec- 
tor selects one from the N clock signals as the 
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permission signal S T . Further, the circuit configuration of 
FIG. 9 can easily be implemented by using a known 
DSP (digital signal processor), a CPU (central process- 
ing unit), or the like. 

As shown in FIG. 1 1 , where circuit blocks similar to 5 
those previously described with reference to FIG. 9 are 
denoted by the same reference numerals, a processor 
(or a logic circuit) 506 may be used to control the selec- 
tor 504 based on the number N E of errors. For example, 
this configuration can accommodate a case where the 10 
number N E of errors exceeds an allowable range. Spe- 
cifically, the checking operation may be suspended 
when the number N E of errors exceeds an allowable 
range, for instance, 0 £ N E <> 8. 

It is possible to make a password harder to break by is 
making the relationship between the number N E of 
errors and the permission signal generation interval 
more complex by means of the processor 506. Specifi- 
cally, random numbers are generated by the processor 
506 in accordance with the number N E of errors, to 20 
cause the selector 504 to select the cycles of the dock 
signals randomly. In this case, since the frequency of 
the permission signal St is randomly varied in accord- 
ance with random numbers, it becomes more cfifficult to 
break the password. 25 

Although in the above embodiments the password 
is assumed to be a single-digit number for convenience 
of description, it is apparent that the invention can be 
applied to a case where the password is a number of 
two or more digits. In the latter case, the embodiments 30 
may be adapted such that the entire input password is 
compared with the entire password that is stored in 
advance in the memory. 

Furthermore, the check permitting section 102 as 
shown in FIG. 1 may be composed of delay flip-flop cir- 35 
cuits which use the permission signal St as a timing 
clock. The lock release permitting section 304 as shown 
in FIG. 5 may be composed of an AND gate inputting 
the permission signal S T and the comparison result. 
Needless to say, the configuration consisting of the 40 
check permitting section 102, the checking section 103, 
the lock controller 105 and the permission signal gener- 
ator 107 may be implemented by a program-controlled 
processor (DSP or CPU). Similarly, the configuration 
consisting of the checking section 302, the lock release 45 
permitting section 304, the lock controller 305 and the 
permission signal generator 307 may be implemented 
by a program-controlled processor (DSP or CPU). 

As described above, according to the present 
invention, the interval between checking operations or so 
the interval between lock release permitting operations 
is elongated in accordance with the number of events of 
non-coincidence in password comparison results. 
Therefore, even if all possible passwords are input, coin- 
cidence does not occur. This provides an advantage ss 
that a password is not easily broken even with the use of 
a computer or the like. Further, according to the inven- 
tion, the password input function is not locked. This pro- 
vides another advantage that even after input of a 



wrong password, the lock of a system can still be 
released by inputting a registered password. 

Claims 

1. A system for providing authorization by checking 
whether input information (PW iN ) is coincident with 
predetermined information (PW REG ), characterized 
by: 

a first controller (107, 307) for varying permis- 
sion timing based on a check result (S C omp) of 
the input information; and 
a second controller (102-105, 302-305) for pro- 
viding the authorization when the check result 
indicates coincidence at the permission timing. 

2. The system according to claim 1, wherein the first 
controller elongates an interval of the permission 
timing based on the check result of the input infor- 
mation. 

3. The system according to claim 2, wherein the first 
controller elongates the interval of the permission 
timing as the number of check results indicating 
non-coincidence increases. 

4. The system according to claim 1 , wherein the first 
controller randomly varies an interval of the permis- 
sion timing based on the check result of the input 
information. 

5. The system according to any of claims 1 -4, wherein 
the second controller comprises: 

a check timing controller (102) for controlling 
check timing of the input information according 
to the permission timing; and 
a controller (105) for providing the authoriza- 
tion when receiving the check result indicating 
coincidence. 

6. The system according to any of claims 1 -4, wherein 
the second controller comprises: 

a timing controller (304) for controlling timing of 
the authorization according to the permission 
timing; and 

a controller (305) for providing the authoriza- 
tion when receiving the check result indicating 
coincidence at the timing of the authorization. 

7. An identification system for providing authorization 
based on input information (PW| N ). characterized 
by: 

an information checker (103, 104, 302, 303) for 
comparing the input information with predeter- 
mined information (PW REG ) to produce a com- 
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parison result (S C omp) indicating one of 
coincidence and non-coincidence, 
a timing generator (107, 307) for generating a 
permission signal (St) with varying a genera- 
tion interval of the permission signal based on s 
the comparison result; and 
a controller (102, 105, 304, 305) for providing 
the authorization based on both the permission 
signal and the comparison result 

70 

8. The identification system according to daim 7, 
wherein 

the information checker produces the compari- 
son result in response to the permission signal is 
received from the timing generator and 
the controller provides the authorization when 
receiving the comparison result indicating coin- 
cidence from the information checker. 

20 

9. The identification system according to claim 8, 
wherein the information checker comprises: 

a check permitting gate (1 02) for supplying the 
input information to the information checker in 25 
response to the permission signal received 
from the timing generator; and 
a comparator (103) for comparing the input 
information with the predetermined information 
to produce the comparison result. 30 

10. The identification system according to claim 7, 
wherein the controller provides the authorization 
when receiving the permission signal received from 
the timing generator while the comparison result 35 
indicating coincidence. 

11. The identification system according to claim 10, 
wherein the controller comprises: 

40 

a release permitting gate (304) for transferring 
the comparison result received from the infor- 
mation checker in response to the permission 
signal received from the timing generator; and 
a lock controller (305) for providing authoriza- 45 
tion of lock release when receiving the compar- 
ison result indicating coincidence from the 
release permitting gate. 

12. The identification system according to claim 8 or so 
10, wherein the timing generator elongates the gen- 
eration interval of the permission signal based the 
comparison result of the input information. 

13. The identification system according to claim 12, ss 
wherein the timing generator elongates the genera- 
tion interval of the permission signal as the number 

of comparison results indicating non-coincidence 
increases. 



14. The identification system according to claim 8 or 
10, wherein the timing generator randomly varies 
the generation interval of the permission signal 
based the comparison result of the input informa- 
tion. 

1 5. The identification system according to any of claims 
7 to 14, wherein the timing generator comprises: 

a reference oscillator (501) for generating a ref- 
erence clock signal; and 
a frequency controller (502-506, 601) for vary- 
ing a frequency of the reference clock signal 
received from the reference oscillator to gener- 
ate the permission signal based on the com- 
parison result 

16. The identification system according to daim 15, 
wherein the frequency controller comprises: 

a frequency divider (502, 503, 601 ) for generat- 
ing a plurality of clock signals from the refer- 
ence dock signal, the dock signals having 
different frequencies; 

a counter (505) for counting comparison results 
indicating non-coinddence to produce a non- 
coincidence count; and 

a selector (504) for selecting one from the clock 
signals as the permission signal based on the 
non-coincidence count 

17. The identification system according to daim 16, 
wherein the selector selects a dock signal having a 
lower frequency as the non-coincidence count 
increases. 

18. The identification system according to daim 16, 
wherein the selector randomly selects one from the 
dock signals as the permission signal based on the 
non-coincidence count. 

19. A method tor providing authorization by checking 
whether input information is coincident with prede- 
termined information, characterized by the steps of : 

varying permission timing based on a check 
result of the input information; and 
providing the authorization when the check 
result indicates coincidence at the permission 
timing. 

20. A method for providing authorization based on input 
information, characterized by the step of: 

comparing the input information with predeter- 
mined information to produce a comparison 
result indicating one of coincidence and non- 
coincidence, 

generating a permission signal with varying a 
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generation interval of the permission signal 
based on the comparison result; and 
providing the authorization based on both the 
permission signal and the comparison result 



9 



EP 0 809 217 A2 




10 



EPQ809 217A2 



S201 



X 



WAIT FOR PASSWORD 



INPUT 
PASSWORD 




S202 



S203 



COINCIDENCE 



S204 




NO 



S207 



NON- 
COINCIDENCE 



L 



ELONGATE GENERATION 
INTERVAL OF PERMISSION 
SIGNAL 



MINIMIZE GENERATION 
INTERVAL OF PERMISSION 
SIGNAL 



S205 



RELEASE LOCK 



S206^ r 



START SYSTEM OPERATING 



11 



EP0 8Q9 217A2 



- j 



■ Q 



3 

a 
o 

2 



^2) 



CE CO 



CO 



00 — > 
I o 



CO 



CO 



iL. 



UJ 



<5f 



a. 



q. 

d. 
d. 



CO 



CM 



J... 
.d... 



*r CO 



o 
cr 
o 

s 

CO 

< 

Q. 

a 

2 



< 

g 

CO 

z 
o 

CO 
CO 

cr 

LU 

a 



co* 

-i 

< 

g 

CO 
LU 
CO 



UJ 

cr 

o 
o 



2 K 

gUJ 

coS 

if 

(T UJ 
QL UJ 

a 



12 



EP0 809 217 A2 




13 



EP0809 217A2 



8 
co 



2 

UJ 

co 



-J 



£ 

-J 

8 



to 

O 
CO 



tr 
o 

< 

UJ 

LU 
O 



O 
CO 

o 

co 

CO 



CE 
LU 
Q. 

o 

CO 



s 

CO 



o 

CO 



1 



-I 

< 
> 

<o 

UJ 

z 

UJ 

o 



or 

Ouj 
C02 
UJ 

a 



C3 

-J LU /v UJ 

Q. 



CO 



§ 

CO 



J,I2 

08 

coo: 
zo 

OK 
UJ 



; lu 
1 q 

|5 

to 
'a 

lO 



CM 
O 
CO 



CO 
O 
CO 



SO 

gco 



0. 



a 




lii 










o 


1 


s 

LU 




2 



30IA3Q indNI 



' CO 



o 

IP 

< 
a 



14 



EP 0 809 217 A2 



F 



S401 



X 



WAIT FOR PASSWORD 



INPUT 
PASSWORD 




S402 



S403 



S404 




NON- 
COINCIDENCE 



L 



S407 



ELONGATE GENERATION 
INTERVAL OF PERCUSSION 
SIGNAL 



S405 



S406 



COINCIDENCE 

A^^PERMI 
<^ SIG 
^\RECE 


$ 


ssiofNv. 

NAL 
YES 


MINIMIZE GENERATION 
■ INTERVAL OF PERMISSION 
SIGNAL 




t 


RELEASE LOCK 


i 





NO 



START SYSTEM OPERATING 



mtingJ - 



15 



EP 0 809 217 A2 



oc CO 

o< 

a 

z 

o 

2 



0> 

CC CO 

o 



in 



.a 

£E CO 

81* 



CO 



r 

Q 
CC 

O 



CO 
CO 

3 

a 

2 




CO 
CO 



in 



CO 
CM 



...El. 



U. 



CO 

-J 

< 

g 

CO 

g 

CO 
CO 

s 

£T 

LU 
CL 



LU 

O 

s 

LU 

g 

o 

o 

¥ 

o 

z 



.n. 



.d. 



UJ 

o 

U 
Q 

5 
z 

o 
o 

z 

O 
CO 

S i- 
OO 



of 



g 

CO 
UJ 
CO 

< 

UJ 

—I 

UJ 

cr 

o 
o 



<> 

g £ 
coz 
z ~ 

CO ~ 

cr uj 

LUZ 
CL LU 

a 



16 




17 



EP0 809 217 A2 




18 



EP 0 809 217 A2 



X 

JO 

< II 

Z u, 

gz 

CO 

o 
o 



z 

UJ 

I 
5 

CO 

— I — 

< I! 
2 u 
02 

CO 

o 
o 



LU 

5 

CM 
K 

CO 

-J CM 
< II 

2 u 

gz 

CO 

o 
o 
_l 
o 



19 




20 



(19) 




• 

111 



(12) 



(88) Date of publication A3: 

31.01.2001 Bulletin 2001/05 

(43) Date of publication A2: 

26.11.1997 Bulletin 1997/48 

(21) Application number: 97108297.9 

(22) Date of filing: 22.05.1 997 



Europaisches Patentamt 
European Patent Office 

Office europeen des brevets (1 1 ) 

EUROPEAN PATENT APPLICATION 

(51) int ci. 7 : G07C 9/00, G07F 7/10 



9 217 



(84) Designated Contracting States: 


(72) Inventor: R/tatsumoto, ftflariko 


DE FR GB 


Minaio-ku, Tokyo (JP) 


(30) Priority: 22.05.1996 JP 12618496 


(74) Representative: 




VOSSIUS & PARTNER 


(71) Applicant NEC CORPORATION 


Siebertstrasse 4 


Tokyo (JP) 


81675 Munchen (DE) 



(54) Secret information indentif ication system 

(57) In a secret information identification system, an 
input password (PWj N ) is compared with a registered 
password (PW REG ) every time a permission signal (S T ) 
is generated. Lock release permission is given when a 
comparison result (S CO mp) indicates coincidence. Alter- 
natively, an input password is compared with a regis- 
tered password and lock release permission is given 
every time a permission signal is generated when the 



comparison indicates coincidence. The cycle of genera- 
tion of the permission signal is elongated as the number 
of events of non-coincidence in comparison results 
increases. As a result, the password is not easily bro- 
ken, and further the password input function is not 
locked even after input of a wrong password. 



FOOL H 



10? FSSOSSCM SIGNAL G8C3UTOR 




EP0 809 217 A3 




European Pattern 



EUROPEAN SEARCH 



Application Number 

EP 97 10 8297 



DOCUMENTS CONSIDERED TO BE ^ELE¥AIMT 



Category 



Citation of document with indication, where appropriate. 
ol relevant passages 



Relevant 
to claim 



CLASStFtCATOM OP THE 
APPLICATOR (lntCt.8) 



US 4 449 040 A (WATSUOKA AKIRA ET AL) 
15 May 1984 (1984-05-15) 

* column 1, line 59 - column 2, line 41 * 

* column 3, line 20 - column 12, line 32; 
figures 1-6 * 

US 4 484 067 A (0BRECHT WERMER) 
20 November 1984 (1984-11-20) 

* column 2, line 26 - column 2, line 59 * 

* column 3, line 28 - column 4, line 54 * 

* column 6, line 11 - column 6 P line 40; 
figures 1,2,6 * 

US 5 594 227 A (DEO VIWAY) 
14 January 1997 (1997-01-14) 

* column 3, line 56 - column 9, line 67; 
figures 1-7 * 



The present search report has been drawn up for aft claims 



1-15.19. 
20 



1,5-11 



G07C9/00 
G07F7/10 



1-15,19, 
20 



VECOGdlCAL FOLDS 
SEARCHED (litLCLS) 



G07C 

607F 



ftaoe ol ooarch 

MUNICH 



Date ol completion o* ma seeroti 

5 December 2000 



Rugglu, M 



CATEGORY OF CfTED DOCUMENTS 

X : particularly relevant (I taken alone 

Y : pa rt cu tarty retevent If combined tv3h another 

document of the sama category 
A : technological background 
O : non-written disclosure 
P : Intermediate document 



T : theory or principle underlying the invention 
E : earfcsr patent document, but pubtshed on. or 

after the f£ng date 
D : document cfled In the application 
L : document died tor other reasons 



& : member of the same patent lamily. corresponding 
document 



EP0 8Q9 217A3 



AMWEX TO THE EUROPEAN SEARCH REPORT 

ON EUROPEAN PATENT APPLOCATION MO. EP 97 10 8297 



This annex lists the patent family membersrelaSng to the patent documents cited In the above-mentioned European search report 
The members are as contained in the European Patent Office EDP file on 

The European Patent Office is in no way liable for these particulars which are merely given for the purpose ol information. 

05-12-2000 



Patent document 




Publication 




Patent family 




Publication 


cited in search report 




date 




membar(s) 




date 


US 4449040 


A 


15-05-1984 


JP 


1225295 C 


31-08-1984 








JP 


57097167 


A 


16-06-1982 






■ • ;. 


JP 


59002062 


B 


17-01-1984 








DE 


3148396 


A 


16-06-1982 








GB 


2091461 A,B 


28-07-1982 








GB 


2150330 


A.B 


26-06-1985 




n 

A 


20-11-1984 


DE 


3041109 


A 


09-06-1982 








BE 


890950 


A 


15-02-1982 








CH 


656014 


A 


30-05-1986 








FR 


2493564 


A 


07-05-1982 








GB 


2088605 


A,B 


09-06-1982 








IT 


1145571 


B 


05-11-1986 








JP 


1747224 


C 


25-03-1993 








JP 


57120183 


A 


27-07-1982 








JP 


63043791 


B 


01-09-1988 








JP 


1727825 


C 


19-01-1993 








JP 


2288993 


A 


28-11-1990 








JP 


4013753 


6 


10-03-1992 








ML 


8104842 


A,B, 


17-05-1982 








SE 


462876 


B 


10-09-1990 








SE 


8106354 


A 


01-05-1982 








SE 


506491 


C 


22-12-1997 j 








SE 


9001035 


A 


23-09-1991 


US 5594227 


A 


14-01-1997 


NONE 








.♦.-> 















w For more details about this annex : see Official Journal of the European Patent Office, No. 12/82 



THIS PAGE BLANK mm, 



DOCKET NO: JIlM- 

SERIAL NO; 

APPLICANT: IMlL^imM^dJ' 

LERNtR AND GREEN9ERG PA 

P.O. BOX ?<80 
HOLLYWOOD, FLORIDA 33022 
TEL (954)925-ti 00 



